1. Personal Data Collection
Throughout this Privacy Policy, the term "Personal Data" refers to any information that relates to an identified or identifiable natural person. The following categories of Personal Data are collected and processed by us during your use of the Service:
Information provided by you
- Account creation and registration. During account creation and sign-up for our Services, we may gather basic account information, including your name, email address, and profile picture (if you choose to provide one).
- Service usage and invitations. Information regarding your subscription plan and payment method is processed when you use or invite others to use our Services. Additionally, we process invitation history when you invite others to use the Service.
- Newsletter subscriptions. From time to time, we may offer email newsletters through our Services. When you subscribe to receive a newsletter, we may request Personal Data such as your email address.
- Contact and feedback. When you reach out to us with feedback, suggestions, or inquiries (e.g., via [email protected]), we may gather the information you provide, which includes your contact information and the content of your message.
Information collected when you use our Services
- Location information. Your location information is received by us when you use our Services. For instance, we may determine your location by analyzing your IP address.
- Device information. Information about the device and software you utilize to access our Services is received by us, which encompasses IP address, device type, device identifiers, web browser type and version, and operating system version.
- Usage information. Information about your interactions with our Services is automatically received by us. This encompasses usage data, visit timestamps, feature interactions, and the pages or other content you view. Additionally, it may include larger chats and files that you upload, as well as the frequency and type of AI tasks performed.
- Cookies and other tracking technologies. Information about your activities on our Services is collected by us and our third-party partners through cookies or other tracking technologies. These same technologies may also be used by our third-party partners, including analytics, advertising, and security partners, to gather information about your online activities across time and different services.
Information collected from other sources
- Third-party authentication. When you log in using accounts from third-party services, we may gather limited information from those services in accordance with their terms and your privacy settings. This may include accessing your name, email address, or profile information.
- Third-party integrations. When you connect our Services with third-party tools, we may access your basic account information (e.g., email, profile details) and workspace content (e.g., documents and spreadsheets) from those services as needed to enable the integration.
- Referrals. When a friend refers you to our Services, we collect the email address of the referred person to facilitate this process and ensure access to the Services is provided.
- Other sources. Information is received from our trusted partners, such as security partners, to help protect against fraud, abuse, and other security threats to our Services.
2. How We Use Your Personal Data
We use the Personal Data described in Section 1 for the following purposes:
- To deliver, operate, and enhance the Service, including all AI-powered features and third-party integrations.
- To create and manage your account, verify your identity when you access the Service, and administer your subscription plan.
- To process payments, manage account credits, and handle billing for users with paid subscriptions.
- To analyze how the Service is used in order to improve features, functionality, and overall user experience.
- To enable third-party integrations that you authorize and connect to your account.
- To address your questions, respond to feedback, and provide customer support.
- To send you service-related communications about how our Services function. You may unsubscribe from these communications at any time.
- To fulfill legal requirements and to safeguard the rights, property, and safety of Kahana Group Inc., our users, and third parties. This includes using your Personal Data to enforce our Terms of Service, detect and prevent fraudulent or abusive activity, and address trust and safety concerns.
4. Data Storage and Security
Data Retention
We retain your Personal Data only for the period necessary to deliver the Service, accomplish the purposes described in this Privacy Policy, or meet our legal obligations. For instance, we may be required to retain certain Personal Data to satisfy tax and accounting requirements, or to preserve information that may be needed to resolve disputes and enforce our legal agreements.
In determining how long to retain your Personal Data, we consider multiple factors, including the type of service you use, the nature and duration of our relationship with you, applicable legal retention requirements, and relevant statutes of limitations. The retention period for your Personal Data may vary depending on the specific purpose for which it was originally collected.
Security Measures
We implement reasonable physical, technical, and administrative safeguards designed to protect the security and confidentiality of your Personal Data. However, please be aware that no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security or privacy of your information.
5. Legal Basis for Processing Personal Data
For users located in the European Economic Area, Switzerland, or the United Kingdom ("Europe"), we process your Personal Data only when we have a valid legal basis under applicable data protection laws. The legal bases we rely on include:
Contract
When you use our Services, we process your Personal Data as necessary to fulfill our contractual obligations to you and to provide the services you have requested.
Legitimate interests
We may process your Personal Data based on our legitimate interests, provided that such interests do not override your fundamental privacy rights and freedoms. When processing Personal Data on this basis, we carefully balance our business needs against your privacy rights and implement measures to minimize any impact on your privacy. Examples of our legitimate interests include delivering and enhancing the services you request, preventing and detecting fraud, and responding to your inquiries about our Services.
Legal obligations
We may process your Personal Data when necessary to comply with applicable legal obligations or to protect the rights and interests of other users. This includes, for example, meeting regulatory reporting requirements and fulfilling tax and accounting obligations.
Consent
In certain circumstances, we may process your Personal Data based on your explicit consent. For instance, we may request your consent before sending you direct marketing communications. You have the right to withdraw your consent at any time by contacting us, and such withdrawal will not affect the lawfulness of processing that occurred before you withdrew consent.
6. Your Privacy Rights and Choices
Your rights regarding your Personal Data may vary depending on your location and applicable data protection laws. If you are located in Europe, you have the following legal rights:
Right to Access and Data Portability
You have the right to request access to your Personal Data that we hold, including receiving a copy of such data in a structured, commonly used, and machine-readable format. You may also request details about how we process your Personal Data.
Right to Rectification and Deletion
You have the right to request that we correct any inaccurate Personal Data we hold about you, complete any incomplete data, or delete your Personal Data, subject to our assessment of the appropriateness of such actions based on applicable law and our legitimate business interests.
Right to Restriction and Objection
You have the right to request that we restrict the processing of your Personal Data or to object to certain types of processing of your Personal Data, where permitted by applicable law.
Right to Withdraw Consent
Where we process your Personal Data based on your consent, you have the right to withdraw that consent at any time, free of charge. Your withdrawal of consent will apply to future processing, but will not affect the lawfulness of any processing that occurred before you withdrew your consent.
In addition to the rights described above, you have the following choices and controls regarding your information:
Managing Your Account
You may update or delete your account information at any time by accessing your account settings or by contacting us through our contact form.
Do Not Track Signals
The Service does not currently respond to "Do Not Track" browser signals, as there is no universally accepted standard for interpreting such signals.
7. Third-Party Services
Our Service may include links to or integrations with third-party websites, services, or applications that are not owned, operated, or controlled by us. We are not responsible for the privacy practices, data collection, or content of these third-party services. We strongly encourage you to review the privacy policies and terms of service of any third-party services before connecting them to or using them in conjunction with our Service.
8. International Data Transfers
Your Personal Data may be transferred to and stored on servers or systems located outside your state, province, country, or other governmental jurisdiction. The data protection laws in these jurisdictions may differ from those in your location.
If you are located outside the United States and provide Personal Data to us, please be aware that we transfer your Personal Data to the United States for processing and storage. By using our Service and providing your Personal Data, you consent to the transfer, storage, and processing of your Personal Data in the United States, even if the data protection laws in the United States may differ from those in your jurisdiction.
9. Privacy for Children
Our Service is not directed to children under the age of 13, and we do not knowingly collect Personal Data from children under 13 years of age.
If you are a parent or guardian and believe that your child under the age of 13 has provided us with Personal Data without your consent, please contact us so that we can address your concerns.
If we discover that we have collected Personal Data from a child under 13 without obtaining verifiable parental consent, we will take prompt action to delete such information from our systems.
10. Changes to This Privacy Policy
We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons.
When we make changes to this Privacy Policy, we will notify you by posting the updated version on this page and updating the "Last Updated" date at the bottom of this Privacy Policy. We may also notify you of material changes through other means, such as email or a prominent notice on our Service.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your Personal Data. Any changes to this Privacy Policy will become effective immediately upon posting on this page, and your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [email protected] or through our contact form
If you are not satisfied with our response to your complaint, or if you believe that our processing of your Personal Data does not comply with applicable data protection laws, you have the right to lodge a complaint with your local data protection supervisory authority. However, we would appreciate the opportunity to address your concerns directly before you contact a supervisory authority, and we encourage you to reach out to us first so that we may attempt to resolve the matter.
This Privacy Policy is effective as of January 1st, 2026